Message platform for automated threat simulation, reporting, detection, and remediation
摘要
說明書
If multiple users report copies of a message, or messages with the same identifying characteristics, this can result in a modifier of the normal score to the message. For example, instead of using the average score reputational score of the reporting users, there can be a modifier that increases the score if a certain number or percentage of users reports the message. This modifier can be changed the more users report or the more users with high reporter reputation scores report a message. This can be tied into the clustering of messages as well to allow increasing, or reduction of, the message score based upon how the message is clustered.
As a non-limiting example, a recipe could be used to resolve reports of suspicious messages and thereby prevent the report from appearing in the console inbox. For example, a rule may be created to match a legitimate message sent by the human resources department of an organization. A recipe can also be created that processes reports satisfying the rule by automatically responding to the user, indicating that the message is legitimate, and removing the message from display in the management console. As illustrated in
